tcpdump of Siri connection with MPTCP option Captured with https://github.com/multipath-tcp/tcpdump on the gateway server (Linux with MPTCP patch). DNS server is modified to answer the gateway server's IP address for guzzoni.apple.com "LTE" means iPhone's LTE network address.

gistfile1.txt

22:28:46.003820 IP iPhone.1024 > daisy.apple.com.https: Flags [S], seq 3599195999, win 65535, options [mss 1460,nop,wscale 3,mptcp capable {0x72d38468f5b08cec},nop,nop,TS val 172462590 ecr 0,sackOK,eol], length 0
22:28:46.005030 IP daisy.apple.com.https > iPhone.1024: Flags [S.], seq 486719052, ack 3599196000, win 14280, options [mss 1460,sackOK,TS val 12199698 ecr 172462590,nop,wscale 7,mptcp capable csum {0x2bbdacfe975af7bf}], length 0
22:28:46.028714 IP iPhone.1024 > daisy.apple.com.https: Flags [.], ack 1, win 8211, options [nop,nop,TS val 172462684 ecr 12199698,mptcp capable csum {0x72d38468f5b08cec,0x2bbdacfe975af7bf}], length 0
22:28:46.093564 IP iPhone.1024 > daisy.apple.com.https: Flags [P.], seq 1:141, ack 1, win 8211, options [nop,nop,TS val 172462699 ecr 12199698,mptcp dss ack 330982975 seq 3246344230 subseq 1 len 140 csum 0xeb65], length 140
22:28:46.093958 IP daisy.apple.com.https > iPhone.1024: Flags [.], ack 141, win 232, options [nop,nop,TS val 12199791 ecr 172462699,mptcp add-addr id 1 localhost.localdomain,mptcp dss ack 3246344370], length 0
22:28:46.133137 IP daisy.apple.com.https > iPhone.1024: Flags [P.], seq 1:1001, ack 141, win 232, options [nop,nop,TS val 12199832 ecr 172462699,mptcp dss ack 3246344370 seq 330982975 subseq 1 len 1000 csum 0xef6a], length 1000
22:28:46.133243 IP daisy.apple.com.https > iPhone.1024: Flags [.], seq 1001:2429, ack 141, win 232, options [nop,nop,TS val 12199832 ecr 172462699,mptcp dss ack 3246344370 seq 330983975 subseq 1001 len 1428 csum 0xef], length 1428
22:28:46.163993 IP iPhone.1024 > daisy.apple.com.https: Flags [.], ack 1001, win 8086, options [nop,nop,TS val 172462819 ecr 12199832,mptcp dss ack 330983975], length 0
22:28:46.164063 IP daisy.apple.com.https > iPhone.1024: Flags [P.], seq 2429:2433, ack 141, win 232, options [nop,nop,TS val 12199863 ecr 172462699,mptcp dss ack 3246344370 seq 330985403 subseq 2429 len 4 csum 0x4be2], length 4
22:28:46.184407 IP iPhone.1024 > daisy.apple.com.https: Flags [.], ack 2433, win 8191, options [nop,nop,TS val 172462838 ecr 12199832,mptcp dss ack 330985407], length 0
22:28:46.184552 IP daisy.apple.com.https > iPhone.1024: Flags [P.], seq 2433:3730, ack 141, win 232, options [nop,nop,TS val 12199882 ecr 172462819,mptcp dss ack 3246344370 seq 330985407 subseq 2433 len 1297 csum 0x5520], length 1297
22:28:46.204564 IP iPhone.1024 > daisy.apple.com.https: Flags [.], ack 3730, win 8029, options [nop,nop,TS val 172462858 ecr 12199882,mptcp dss ack 330986704], length 0
22:28:46.223479 IP iPhone.1024 > daisy.apple.com.https: Flags [F.], seq 141, ack 3730, win 8029, options [nop,nop,TS val 172462883 ecr 12199882,mptcp dss fin ack 330986704 seq 3246344370 subseq 0 len 1 csum 0xb998], length 0
22:28:46.244080 IP iPhone.blackjack > daisy.apple.com.https: Flags [S], seq 1619211303, win 65535, options [mss 1460,nop,wscale 3,mptcp capable {0xe7fc9823d5220b6f},nop,nop,TS val 172462902 ecr 0,sackOK,eol], length 0
22:28:46.244389 IP daisy.apple.com.https > iPhone.blackjack: Flags [S.], seq 153108809, ack 1619211304, win 14280, options [mss 1460,sackOK,TS val 12199942 ecr 172462902,nop,wscale 7,mptcp capable csum {0xe75c0dc8a2324b6e}], length 0
22:28:46.324251 IP LTE.51483 > daisy.apple.com.https: Flags [S], seq 124898848, win 65535, options [mss 1388,nop,wscale 3,mptcp join backup id 2 token 0xefd88ed3 nonce 0xa17db7ee,nop,nop,TS val 172462771 ecr 0,sackOK,eol], length 0
22:28:46.324519 IP daisy.apple.com.https > LTE.51483: Flags [S.], seq 3469573790, ack 124898849, win 14280, options [mss 1460,sackOK,TS val 12200022 ecr 172462771,nop,wscale 7,mptcp join id 0 hmac 0xb8dedcc1a6440277 nonce 0x5c422a31], length 0
22:28:46.373884 IP iPhone.blackjack > daisy.apple.com.https: Flags [.], ack 2433, win 8191, options [nop,nop,TS val 172463021 ecr 12200038,mptcp dss ack 1581501030], length 0
22:28:46.373972 IP daisy.apple.com.https > iPhone.blackjack: Flags [P.], seq 2433:3730, ack 141, win 232, options [nop,nop,TS val 12200072 ecr 172463002,mptcp dss ack 3477080493 seq 1581501030 subseq 2433 len 1297 csum 0xc2db], length 1297
22:28:46.388811 IP LTE.51471 > daisy.apple.com.https: Flags [S], seq 970380433, win 65535, options [mss 1388,nop,wscale 3,mptcp join backup id 2 token 0x79701d4c nonce 0xa55d4e97,nop,nop,TS val 172462952 ecr 0,sackOK,eol], length 0
22:28:46.388923 IP daisy.apple.com.https > LTE.51471: Flags [S.], seq 130921612, ack 970380434, win 14280, options [mss 1460,sackOK,TS val 12200088 ecr 172462952,nop,wscale 7,mptcp join id 0 hmac 0xeddb2cca2f4efad9 nonce 0x76d9b16d], length 0
22:28:46.394034 IP iPhone.blackjack > daisy.apple.com.https: Flags [.], ack 3730, win 8029, options [nop,nop,TS val 172463046 ecr 12200072,mptcp dss ack 1581502327], length 0
22:28:46.423753 IP iPhone.blackjack > daisy.apple.com.https: Flags [F.], seq 141, ack 3730, win 8029, options [nop,nop,TS val 172463071 ecr 12200072,mptcp dss fin ack 1581502327 seq 3477080493 subseq 0 len 1 csum 0x324b], length 0
22:28:46.464777 IP daisy.apple.com.https > iPhone.blackjack: Flags [.], ack 142, win 232, options [nop,nop,TS val 12200163 ecr 172463071,mptcp dss ack 3477080494], length 0
22:28:46.465007 IP LTE.51483 > daisy.apple.com.https: Flags [R], seq 124898849, win 0, length 0
22:28:46.475145 IP LTE.51471 > daisy.apple.com.https: Flags [.], ack 1, win 8305, options [nop,nop,TS val 172463068 ecr 12200088,mptcp join hmac 0x8d5715605ad82901148e3d68d68e8fe914be3f8e], length 0
22:28:46.475707 IP daisy.apple.com.https > LTE.51471: Flags [.], ack 1, win 344, options [nop,nop,TS val 12200172 ecr 172463068,mptcp dss ack 3477080494], length 0
22:28:46.475938 IP LTE.51471 > daisy.apple.com.https: Flags [F.], seq 1, ack 1, win 8305, options [nop,nop,TS val 172463071 ecr 12200088,mptcp join hmac 0x8d5715605ad82901148e3d68d68e8fe914be3f8e], length 0
22:28:46.476067 IP daisy.apple.com.https > LTE.51471: Flags [.], ack 2, win 344, options [nop,nop,TS val 12200172 ecr 172463071,mptcp dss ack 3477080494], length 0
22:28:46.476151 IP iPhone.cap > daisy.apple.com.https: Flags [S], seq 775763812, win 65535, options [mss 1460,nop,wscale 3,mptcp capable {0xc15ac272fc10559a},nop,nop,TS val 172463084 ecr 0,sackOK,eol], length 0
22:28:46.476377 IP daisy.apple.com.https > iPhone.cap: Flags [S.], seq 1874537811, ack 775763813, win 14280, options [mss 1460,sackOK,TS val 12200172 ecr 172463084,nop,wscale 7,mptcp capable csum {0x459a7850bf0099bc}], length 0
22:28:46.504311 IP iPhone.blackjack > daisy.apple.com.https: Flags [.], ack 3730, win 8029, options [nop,nop,TS val 172463148 ecr 12200163], length 0
22:28:46.504361 IP iPhone.cap > daisy.apple.com.https: Flags [.], ack 1, win 8211, options [nop,nop,TS val 172463148 ecr 12200172,mptcp capable csum {0xc15ac272fc10559a,0x459a7850bf0099bc}], length 0
22:28:46.517698 IP iPhone.cap > daisy.apple.com.https: Flags [P.], seq 1:141, ack 1, win 8211, options [nop,nop,TS val 172463155 ecr 12200172,mptcp dss ack 555543836 seq 3179982228 subseq 1 len 140 csum 0x870e], length 140
22:28:46.517777 IP daisy.apple.com.https > iPhone.cap: Flags [.], ack 141, win 232, options [nop,nop,TS val 12200217 ecr 172463155,mptcp add-addr id 1 localhost.localdomain,mptcp dss ack 3179982368], length 0
22:28:46.536150 IP LTE.51471 > daisy.apple.com.https: Flags [.], ack 1, win 8305, options [nop,nop,TS val 172463162 ecr 12200172], length 0
22:28:46.562093 IP LTE.51474 > daisy.apple.com.https: Flags [S], seq 3516921108, win 65535, options [mss 1388,nop,wscale 3,mptcp join backup id 2 token 0x66cc74c0 nonce 0x817da450,nop,nop,TS val 172463178 ecr 0,sackOK,eol], length 0
22:28:46.562565 IP daisy.apple.com.https > LTE.51474: Flags [S.], seq 2789509902, ack 3516921109, win 14280, options [mss 1460,sackOK,TS val 12200259 ecr 172463178,nop,wscale 7,mptcp join id 0 hmac 0x221266a44297252b nonce 0x60edbb68], length 0
22:28:46.564607 IP iPhone.1027 > daisy.apple.com.https: Flags [S], seq 3437322481, win 65535, options [mss 1460,nop,wscale 4,nop,nop,TS val 172463210 ecr 0,sackOK,eol], length 0
22:28:46.564656 IP daisy.apple.com.https > iPhone.1027: Flags [S.], seq 1688680612, ack 3437322482, win 14480, options [mss 1460,sackOK,TS val 12200263 ecr 172463210,nop,wscale 7], length 0
22:28:46.573078 IP daisy.apple.com.https > iPhone.cap: Flags [P.], seq 1:1001, ack 141, win 232, options [nop,nop,TS val 12200272 ecr 172463155,mptcp dss ack 3179982368 seq 555543836 subseq 1 len 1000 csum 0xb463], length 1000
22:28:46.573940 IP daisy.apple.com.https > iPhone.cap: Flags [.], seq 1001:2429, ack 141, win 232, options [nop,nop,TS val 12200273 ecr 172463155,mptcp dss ack 3179982368 seq 555544836 subseq 1001 len 1428 csum 0xbb18], length 1428
22:28:46.575438 IP iPhone.1028 > daisy.apple.com.https: Flags [S], seq 3538154413, win 65535, options [mss 1460,nop,wscale 4,nop,nop,TS val 172463212 ecr 0,sackOK,eol], length 0
22:28:46.575438 IP daisy.apple.com.https > iPhone.1028: Flags [S.], seq 2826947360, ack 3538154414, win 14480, options [mss 1460,sackOK,TS val 12200274 ecr 172463212,nop,wscale 7], length 0
22:28:46.584104 IP iPhone.1027 > daisy.apple.com.https: Flags [.], ack 1, win 8235, options [nop,nop,TS val 172463223 ecr 12200263], length 0
22:28:46.594495 IP iPhone.cap > daisy.apple.com.https: Flags [.], ack 1001, win 8086, options [nop,nop,TS val 172463230 ecr 12200272,mptcp dss ack 555544836], length 0
22:28:46.594638 IP daisy.apple.com.https > iPhone.cap: Flags [P.], seq 2429:2433, ack 141, win 232, options [nop,nop,TS val 12200293 ecr 172463155,mptcp dss ack 3179982368 seq 555546264 subseq 2429 len 4 csum 0x60c], length 4
22:28:46.594716 IP iPhone.1028 > daisy.apple.com.https: Flags [.], ack 1, win 8235, options [nop,nop,TS val 172463231 ecr 12200274], length 0
22:28:46.633862 IP iPhone.1027 > daisy.apple.com.https: Flags [P.], seq 1:185, ack 1, win 8235, options [nop,nop,TS val 172463238 ecr 12200263], length 184
22:28:46.634035 IP daisy.apple.com.https > iPhone.1027: Flags [.], ack 185, win 122, options [nop,nop,TS val 12200332 ecr 172463238], length 0
22:28:46.649293 IP LTE.51474 > daisy.apple.com.https: Flags [.], ack 1, win 8305, options [nop,nop,TS val 172463223 ecr 12200259,mptcp join hmac 0x77223205068116de226fa5a062959d147ea73f87], length 0
22:28:46.649393 IP daisy.apple.com.https > LTE.51474: Flags [.], ack 1, win 344, options [nop,nop,TS val 12200347 ecr 172463223,mptcp dss ack 3179982368], length 0
22:28:46.652297 IP iPhone.1028 > daisy.apple.com.https: Flags [P.], seq 1:185, ack 1, win 8235, options [nop,nop,TS val 172463251 ecr 12200274], length 184
22:28:46.652346 IP daisy.apple.com.https > iPhone.1028: Flags [.], ack 185, win 122, options [nop,nop,TS val 12200351 ecr 172463251], length 0
22:28:46.652727 IP daisy.apple.com.https > iPhone.cap: Flags [P.], seq 2429:2433, ack 141, win 344, options [nop,nop,TS val 12200352 ecr 172463230,mptcp dss ack 3179982368 seq 555546264 subseq 2429 len 4 csum 0x60c], length 4
22:28:46.653115 IP iPhone.cap > daisy.apple.com.https: Flags [.], ack 2433, win 8191, options [nop,nop,TS val 172463278 ecr 12200273,mptcp dss ack 555546268], length 0
22:28:46.653152 IP daisy.apple.com.https > iPhone.cap: Flags [P.], seq 2433:3730, ack 141, win 344, options [nop,nop,TS val 12200352 ecr 172463230,mptcp dss ack 3179982368 seq 555546268 subseq 2433 len 1297 csum 0xcf8f], length 1297
22:28:46.681859 IP iPhone.cap > daisy.apple.com.https: Flags [.], ack 2433, win 8192, options [nop,nop,TS val 172463305 ecr 12200352,mptcp dss ack 555546268], length 0
22:28:46.682144 IP iPhone.cap > daisy.apple.com.https: Flags [.], ack 3730, win 8029, options [nop,nop,TS val 172463306 ecr 12200352,mptcp dss ack 555547565], length 0
22:28:46.687428 IP daisy.apple.com.https > iPhone.1027: Flags [P.], seq 1:1001, ack 185, win 122, options [nop,nop,TS val 12200386 ecr 172463238], length 1000
22:28:46.688298 IP daisy.apple.com.https > iPhone.1027: Flags [.], seq 1001:2449, ack 185, win 122, options [nop,nop,TS val 12200387 ecr 172463238], length 1448
22:28:46.688872 IP daisy.apple.com.https > iPhone.1028: Flags [P.], seq 1:1001, ack 185, win 122, options [nop,nop,TS val 12200388 ecr 172463251], length 1000
22:28:46.688999 IP daisy.apple.com.https > iPhone.1028: Flags [.], seq 1001:2449, ack 185, win 122, options [nop,nop,TS val 12200388 ecr 172463251], length 1448
22:28:46.704286 IP iPhone.cap > daisy.apple.com.https: Flags [F.], seq 141, ack 3730, win 8029, options [nop,nop,TS val 172463328 ecr 12200352,mptcp dss fin ack 555547565 seq 3179982368 subseq 0 len 1 csum 0x9511], length 0
22:28:46.713805 IP iPhone.1027 > daisy.apple.com.https: Flags [.], ack 1001, win 8173, options [nop,nop,TS val 172463338 ecr 12200386], length 0
22:28:46.714144 IP daisy.apple.com.https > iPhone.1027: Flags [P.], seq 2449:3200, ack 185, win 122, options [nop,nop,TS val 12200411 ecr 172463338], length 751
22:28:46.735555 IP iPhone.1028 > daisy.apple.com.https: Flags [.], ack 1001, win 8173, options [nop,nop,TS val 172463344 ecr 12200388], length 0
22:28:46.735701 IP daisy.apple.com.https > iPhone.1028: Flags [P.], seq 2449:3200, ack 185, win 122, options [nop,nop,TS val 12200434 ecr 172463344], length 751
22:28:46.739589 IP LTE.51474 > daisy.apple.com.https: Flags [F.], seq 1, ack 1, win 8305, options [nop,nop,TS val 172463328 ecr 12200347,mptcp dss fin ack 555547565 seq 3179982368 subseq 0 len 1 csum 0x9511], length 0
22:28:46.743145 IP daisy.apple.com.https > iPhone.cap: Flags [.], ack 142, win 344, options [nop,nop,TS val 12200442 ecr 172463328,mptcp dss ack 3179982369], length 0